Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS5511.roa
File: AS5511.roa (raw, json)
Hash identifier: 52WbprXagFN/E8d+KtGN/xhTanC6OTJaIpNW60h+yHw=
Subject key identifier: 62:0F:1B:EA:37:FC:8E:7D:CA:45:4E:D4:EE:08:98:A5:51:CD:E1:74
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 4060730610B4A8D7E64AC1598583438F2802EFEE
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS5511.roa
Signing time: Wed 18 Feb 2026 00:00:10 +0000
ROA not before: Tue 17 Feb 2026 23:55:10 +0000
ROA not after: Wed 17 Feb 2027 00:00:10 +0000
asID: 5511
IP address blocks: 82.21.94.0/24 maxlen: 24
82.22.86.0/24 maxlen: 24
82.22.96.0/24 maxlen: 24
82.22.111.0/24 maxlen: 24
82.22.114.0/24 maxlen: 24
82.22.120.0/24 maxlen: 24
82.22.121.0/24 maxlen: 24
82.22.122.0/24 maxlen: 24
82.22.123.0/24 maxlen: 24
82.22.141.0/24 maxlen: 24
82.22.144.0/24 maxlen: 24
82.22.197.0/24 maxlen: 24
82.23.3.0/24 maxlen: 24
82.23.4.0/24 maxlen: 24
82.23.5.0/24 maxlen: 24
82.23.6.0/24 maxlen: 24
82.23.15.0/24 maxlen: 24
82.23.44.0/24 maxlen: 24
82.23.45.0/24 maxlen: 24
82.23.46.0/24 maxlen: 24
82.23.47.0/24 maxlen: 24
82.23.48.0/24 maxlen: 24
82.23.50.0/24 maxlen: 24
82.23.51.0/24 maxlen: 24
82.23.52.0/24 maxlen: 24
82.23.53.0/24 maxlen: 24
82.23.55.0/24 maxlen: 24
82.23.56.0/24 maxlen: 24
82.23.57.0/24 maxlen: 24
82.23.58.0/24 maxlen: 24
82.23.61.0/24 maxlen: 24
82.23.62.0/24 maxlen: 24
82.23.63.0/24 maxlen: 24
82.23.64.0/24 maxlen: 24
82.23.69.0/24 maxlen: 24
82.23.74.0/24 maxlen: 24
82.23.79.0/24 maxlen: 24
82.23.123.0/24 maxlen: 24
82.23.134.0/24 maxlen: 24
82.24.17.0/24 maxlen: 24
82.24.26.0/24 maxlen: 24
82.24.63.0/24 maxlen: 24
82.24.90.0/24 maxlen: 24
82.24.175.0/24 maxlen: 24
82.24.244.0/24 maxlen: 24
82.24.246.0/24 maxlen: 24
82.25.134.0/24 maxlen: 24
82.25.244.0/24 maxlen: 24
82.25.246.0/24 maxlen: 24
82.26.83.0/24 maxlen: 24
82.26.204.0/24 maxlen: 24
82.26.244.0/24 maxlen: 24
82.27.20.0/24 maxlen: 24
82.27.101.0/24 maxlen: 24
82.27.103.0/24 maxlen: 24
82.39.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:60:73:06:10:b4:a8:d7:e6:4a:c1:59:85:83:43:8f:28:02:ef:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Feb 17 23:55:10 2026 GMT
Not After : Feb 17 00:00:10 2027 GMT
Subject: CN=620F1BEA37FC8E7DCA454ED4EE0898A551CDE174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:50:11:a5:61:7f:10:3a:a2:67:b3:7a:01:1f:
d7:98:1d:ac:0c:dd:59:dc:f8:51:ef:3a:a3:00:9f:
73:7e:0d:d9:84:79:ac:00:f9:4c:45:3a:a3:bb:c3:
43:32:85:86:b0:85:b8:67:02:91:a3:c7:c3:1f:43:
b2:d9:d1:df:63:b7:72:a7:bd:80:01:b6:96:9c:ba:
f9:b1:57:74:32:bc:b2:c1:1e:c1:1f:e1:41:6a:b8:
c8:61:1f:b6:df:28:df:f6:a2:93:67:90:af:13:05:
24:6e:b9:91:ed:51:4c:99:5f:a4:5f:d9:10:59:f9:
ea:22:21:dc:18:66:08:5e:37:fb:84:ed:27:5e:19:
3f:d6:8f:f1:e3:63:d6:b5:12:1d:74:4e:ad:69:4d:
d1:36:d1:54:85:a3:34:56:63:9f:4b:8d:6e:83:e3:
d2:55:b8:7e:82:87:c4:29:89:8c:00:7c:10:db:e5:
21:dd:de:e4:0a:38:19:5d:ad:c6:c8:60:b1:b1:0b:
21:d2:08:83:00:b7:0f:21:72:3c:0b:09:04:f5:f7:
0e:70:7f:0c:11:b9:9f:94:88:7b:ab:91:e2:4e:6b:
30:dd:72:68:43:70:0e:ad:e4:51:4d:87:aa:eb:c7:
e4:a1:03:24:7d:0e:0f:bd:d8:6c:2d:96:98:d1:fc:
ab:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0F:1B:EA:37:FC:8E:7D:CA:45:4E:D4:EE:08:98:A5:51:CD:E1:74
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS5511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.21.94.0/24
82.22.86.0/24
82.22.96.0/24
82.22.111.0/24
82.22.114.0/24
82.22.120.0/22
82.22.141.0/24
82.22.144.0/24
82.22.197.0/24
82.23.3.0-82.23.6.255
82.23.15.0/24
82.23.44.0-82.23.48.255
82.23.50.0-82.23.53.255
82.23.55.0-82.23.58.255
82.23.61.0-82.23.64.255
82.23.69.0/24
82.23.74.0/24
82.23.79.0/24
82.23.123.0/24
82.23.134.0/24
82.24.17.0/24
82.24.26.0/24
82.24.63.0/24
82.24.90.0/24
82.24.175.0/24
82.24.244.0/24
82.24.246.0/24
82.25.134.0/24
82.25.244.0/24
82.25.246.0/24
82.26.83.0/24
82.26.204.0/24
82.26.244.0/24
82.27.20.0/24
82.27.101.0/24
82.27.103.0/24
82.39.165.0/24
Signature Algorithm: sha256WithRSAEncryption
81:48:cf:a1:09:c3:2c:78:e0:c3:bb:5b:34:02:40:4d:8c:d8:
ce:8d:63:c5:a8:95:d1:9f:25:b7:e5:66:c2:60:50:37:dc:54:
a4:15:13:ef:8e:ff:3f:7e:8a:74:52:2b:57:99:80:a4:9d:d2:
1d:f6:4b:e3:8d:d2:d1:fe:51:a4:65:fc:72:5f:8c:56:bc:44:
b8:ad:d8:07:e2:0e:b8:fa:1b:73:8d:24:1d:e5:98:d9:0e:bb:
78:0c:96:f4:e7:01:04:62:e5:fd:7b:5e:ed:50:85:9c:b2:bd:
4b:0f:41:99:72:3d:24:8a:af:14:ce:32:af:f6:72:77:14:ae:
9c:b8:1f:bd:4c:25:c1:d7:03:11:65:bb:1e:18:0c:07:a5:bb:
6d:97:e1:75:6e:c8:f6:04:9d:41:72:76:62:7f:32:47:5d:eb:
5e:09:7c:eb:eb:4d:11:6b:7e:e6:f7:fc:ac:4f:44:06:cb:c5:
13:30:8a:7c:d5:a1:72:bd:7d:b7:bc:22:c8:07:90:9e:6f:43:
a0:20:98:ad:45:b0:ce:4e:7c:6e:55:85:10:f3:7c:dd:dc:33:
aa:c3:de:74:91:2f:f8:4a:1f:13:74:82:a6:0b:e8:d9:2b:4b:
46:70:5d:74:87:c0:37:58:4d:83:d3:39:20:84:a1:06:f2:df:
cd:b8:91:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:13:09 2026 by rpki-client